cisco 2600路由访问列表设置不好,请教各位

来源:百度知道 编辑:UC知道 时间:2024/06/15 12:36:57
我希望让30台电脑上网,这是一个启动的配置

colrouter#sh run
Building configuration...

Current configuration : 1372 bytes
!
version 12.2
no service timestamps debug uptime
no service timestamps log uptime
service password-encryption
!
hostname colrouter
!
enable secret 5 $1$inkt$/CgHgkDttk5qp1CfluzeB1
!
ip subnet-zero
no ip domain-lookup
ip name-server 202.96.199.133
ip name-server 210.22.70.3
ip name-server 202.140.168.1
ip name-server 202.96.209.5
!
!
!
!
interface Loopback0
ip address 1.2.3.4 255.255.255.0
!
interface Ethernet0/0
description link to COL pudong
ip address 公.网.地.址 255.255.255.248
ip access-group 101 out
no ip unreachables
ip accounting output-packets
ip nat outside
no ip mroute-cache
full-duplex
!
interface Ethernet1/0
ip address 192.168.1.1 255.255.252.

access-list 101 permit ip 192.168.3.96 0.0.0.31 any
ip nat pool 2600 公.网.地.址 公.网.地.址 netmask 255.255.255.248
ip nat inside source list 101 pool 2600 overload
ip nat inside source static 192.168.1.62 116.228.207.6
ip nat inside source static 192.168.1.134 116.228.207.4

access-list 101 已经被NAT转换使用了 你要定义访问控制列表必须重新定义访问控制列表
access-list 102 如果要直接在101开始改必须删除现有的NAT转换列表重新对NAT转换列表进行编辑